In the Linux kernel, the following vulnerability has been resolved:

ALSA: asihpi: Fix potential OOB array access at reading cache

find_control() to retrieve a cached info accesses the array with the
given index blindly, which may lead to an OOB array access.
Add a sanity check for avoiding it.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00176.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
719f82d3987aad4cc9f46d19c35f362672545cad affected < e060e21fe9cca1e5eafd8a1c597026577771e8d9
719f82d3987aad4cc9f46d19c35f362672545cad affected < 34d0d492a2812b9289af14bca3573a89275965b2
719f82d3987aad4cc9f46d19c35f362672545cad affected < ffa29cea7bf9a4ef2ea8084967f142e0301ac670
719f82d3987aad4cc9f46d19c35f362672545cad affected < 7b6f8c8eb93f02a74b1de8e521c0952af10d1f43
719f82d3987aad4cc9f46d19c35f362672545cad affected < 8778386e4387b28f2bf8425d7ffc667c6294457f
719f82d3987aad4cc9f46d19c35f362672545cad affected < 61c5017c64e2ac9e10b70b14b17a079dbc0a805f
719f82d3987aad4cc9f46d19c35f362672545cad affected < 7d107239935793995bdc6cf29bb99e180bde4c28
719f82d3987aad4cc9f46d19c35f362672545cad affected < 7b7d6572145c1dab2dd9bfb550b188e5f0ff3c3f
Linux Linux affected
Version Status Constraints
2.6.35 affected —
0 unaffected < 2.6.35
5.10.258 unaffected ≤ 5.10.*
5.15.209 unaffected ≤ 5.15.*
6.1.175 unaffected ≤ 6.1.*
6.6.142 unaffected ≤ 6.6.*
6.12.92 unaffected ≤ 6.12.*
6.18.34 unaffected ≤ 6.18.*
7.0.11 unaffected ≤ 7.0.*
7.1 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/34d0d492a2812b9289af14bca3573a89275965b2 cve-icon
https://git.kernel.org/stable/c/61c5017c64e2ac9e10b70b14b17a079dbc0a805f cve-icon
https://git.kernel.org/stable/c/7b6f8c8eb93f02a74b1de8e521c0952af10d1f43 cve-icon
https://git.kernel.org/stable/c/7b7d6572145c1dab2dd9bfb550b188e5f0ff3c3f cve-icon
https://git.kernel.org/stable/c/7d107239935793995bdc6cf29bb99e180bde4c28 cve-icon
https://git.kernel.org/stable/c/8778386e4387b28f2bf8425d7ffc667c6294457f cve-icon
https://git.kernel.org/stable/c/e060e21fe9cca1e5eafd8a1c597026577771e8d9 cve-icon
https://git.kernel.org/stable/c/ffa29cea7bf9a4ef2ea8084967f142e0301ac670 cve-icon
https://lore.kernel.org/linux-cve-announce/2026071927-CVE-2026-64133-e669@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-64133 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-64133 cve-icon
History

Mon, 20 Jul 2026 14:45:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Mon, 20 Jul 2026 12:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-125
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Sun, 19 Jul 2026 16:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access at reading cache find_control() to retrieve a cached info accesses the array with the given index blindly, which may lead to an OOB array access. Add a sanity check for avoiding it.
Title ALSA: asihpi: Fix potential OOB array access at reading cache
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-07-20T13:43:39.352Z

Reserved: 2026-07-19T07:54:57.036Z

Link: CVE-2026-64133

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-07-19T00:00:00Z

Links: CVE-2026-64133 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses